Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: 08Vk2Nk+IX59/FkgPYxi+TkurRicX2CbzoTByD7Yzdg=
Subject key identifier: 93:2C:26:4A:FC:BB:2A:9A:C0:5F:1F:4B:FD:5F:0C:A5:B1:91:A5:45
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 019D29971F1A4F8712F7AB42FAE1127FF556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0A94
Signing time: Thu 26 Mar 2026 10:01:02 +0000
Manifest this update: Thu 26 Mar 2026 10:01:02 +0000
Manifest next update: Fri 27 Mar 2026 10:01:02 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: rlKBgTXtRKPybr2rVS83Rj9ZaURMilXQkVI/z0JXJi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:1f:1a:4f:87:12:f7:ab:42:fa:e1:12:7f:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Mar 26 10:01:02 2026 GMT
Not After : Mar 27 10:01:02 2026 GMT
Subject: CN=932c264afcbb2a9ac05f1f4bfd5f0ca5b191a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:57:bd:0a:4d:60:09:9d:5a:ac:fc:49:29:
cc:fe:8e:ac:a4:8e:c8:ea:50:f8:d7:05:28:1a:f8:
02:3a:4b:a6:77:a8:04:0f:9d:ae:ba:ec:ea:ed:2b:
de:b1:ae:b6:7e:72:40:03:3d:6e:23:35:db:74:12:
51:99:09:c9:57:89:58:05:24:5f:73:ef:36:dd:ad:
48:7c:0f:fd:d6:eb:28:51:47:3a:db:dd:3e:f6:ca:
98:7a:fd:f6:f9:6a:f3:8c:7c:c4:14:cd:d1:2e:21:
ca:03:e2:1a:b9:36:2b:45:d2:a7:06:8e:bd:6c:bc:
70:19:68:73:63:cf:a3:c6:7c:57:8e:b0:f8:30:3f:
e6:3a:f7:28:91:72:26:d8:45:03:34:1e:66:0a:59:
6e:cb:bd:c6:a4:23:c9:4f:22:70:46:76:5c:a5:21:
7c:a7:5b:f7:2b:37:41:a7:3c:5d:4f:91:3d:e4:bf:
37:89:4e:61:7b:58:f7:4d:96:ab:2d:4a:6a:ab:27:
19:85:26:2a:42:b8:6f:ff:33:40:3c:27:48:34:5d:
f1:82:fd:f6:41:85:ec:a1:ec:88:5f:47:25:0d:cb:
1d:3b:ea:55:fa:e4:11:d7:90:23:ed:de:5c:52:1e:
52:0c:27:6d:e9:52:be:ac:cc:3e:ef:63:99:02:b8:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:26:4A:FC:BB:2A:9A:C0:5F:1F:4B:FD:5F:0C:A5:B1:91:A5:45
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:4e:20:24:05:1d:ca:46:2f:0b:4d:e0:fe:f9:6a:14:9e:
7b:0f:dc:0e:fb:05:9a:ad:21:8b:22:ba:20:33:dc:a0:7d:4a:
c0:db:39:d4:53:63:14:83:cc:2a:c1:f5:91:95:4a:ee:37:f1:
3d:4f:00:34:39:de:1a:da:a8:33:34:c2:ed:9a:58:11:ce:b2:
2b:f4:cd:0e:0f:e6:86:80:fd:29:06:b5:e9:18:86:93:4b:79:
56:f8:4f:10:6e:ae:82:a8:bd:f2:6d:54:d7:1c:e5:dc:70:cf:
7d:0d:e8:fc:09:20:97:ce:72:76:7b:c5:ce:4d:1c:3a:7a:89:
22:db:f7:bf:8d:2f:cd:9c:64:c7:c9:b8:d1:52:83:48:e3:c7:
b1:41:dc:b0:1a:e9:7e:6a:5d:bc:0c:e8:8d:41:7c:85:82:53:
b1:90:4b:0f:d9:86:f5:82:27:b8:4a:70:2a:7f:7b:df:39:70:
c6:af:c4:aa:b0:f4:27:49:69:da:18:84:cc:48:2a:25:79:7b:
22:fd:f8:6d:f9:c5:c0:1d:85:a7:97:a6:b0:db:ab:21:db:3c:
e2:69:7a:c3:e6:5d:f7:f2:ca:21:0e:7b:37:a7:06:3b:3a:02:
ba:b4:37:6b:69:31:d0:58:48:fc:97:bd:4d:4d:f3:44:f0:0e:
2e:fd:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:28 2026 by rpki-client